Skip to content

Bump microsoft.cst.devskim.cli from 1.0.70 to 1.0.90#1251

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/microsoft.cst.devskim.cli-1.0.90
Open

Bump microsoft.cst.devskim.cli from 1.0.70 to 1.0.90#1251
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/dot-config/microsoft.cst.devskim.cli-1.0.90

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Updated microsoft.cst.devskim.cli from 1.0.70 to 1.0.90.

Release notes

Sourced from microsoft.cst.devskim.cli's releases.

1.0.90

Changes:

  • fb2d676ce475a47c0338966bebd97a47ae566572 Use .NET 10 SDK in CLI release pipeline (#​763)
  • 17706a84717a082984090f34621834e6aeff2925 Add .NET 10 as a publishing target and move VS Code extension to .NET 10 (#​755)
  • da7c7775a08cfd985131c8d7e13e10745e2a083d Bump qs from 6.15.0 to 6.15.2 in /DevSkim-VSCode-Plugin (#​753)
  • 751517ba0094489fbf838168ad72d0f19d2ccf30 Bump uuid and @​azure/identity in /DevSkim-VSCode-Plugin (#​752)
  • 9b50d5fe987c3d875f1d786eeff42e1a689e0b75 Bump tmp from 0.2.5 to 0.2.7 in /DevSkim-VSCode-Plugin (#​754)
  • e226b96ed22642faefa0420c58f129083388adc0 Update VSCode extension deps and settings (#​749)
  • ba699ffba92f17793b51d3ebd2063ddabcc4574d set registry for publishing task (#​743)
  • 81bfe616a5241eff61dc75fdd986aa4c736982b3 fix running vsce (#​742)
  • a45de52fa4ef82f6c05243a904e255fc67203974 Bump ESLint and TS-ESLint in lockfiles (#​741)
  • e2507b31b41a82968314b5957027445e1224b9e9 try fix error installing @​vscode/vsce (#​740)
See More
  • c939631a21f739f3f936f1bceca6fcb6049d23a8 Rewrite VS extension using VisualStudio.Extensibility SDK for VS2022/2026 compatibility (#​720)
  • 5e994fd7c30dce8e514ee9ef21ebe0122effad68 chore: update VS Code plugin npm dependencies (consolidate dependabot PRs) (#​733)
  • 8dba33eab237e5a543cecc0e5c01c5f4d9847c70 Use AzureArtifacts registry for vsce install (#​732)
  • 9e483f7b14ee58b7d4d20e964acc34a83320c29d Fix DS126858 false positive on --nomd5 and similar disable flags (#​722)
  • 941862bfb3eb1137369f39806a502c7e4c28d66c Remove redundant @​vscode/vsce uninstall/reinstall from postinstall (#​723)
  • 3611e5a2fb20c156069a6efed81dbb2aff880015 Anchor .config regex to prevent matching .config.json files (#​721)
  • c48f53d0fdf6eba867979f66df44ab5f3f700d0c Suppress DS173237 on all-zero values (#​709)
  • 565fee801388d12c204137ba2483b0103ac03d9e Add Copilot instructions for repository-specific agent guidance (#​719)
  • c6c608c7b5c47aff07dc0edbbbd0f0160a3600c3 Fix invalid trailing comma in package.json (#​716)
  • aa6f63f08055de200a00eac3a65672fe1f80f661 fix registry used for vscode ext release (#​715)

This list of changes was auto generated.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: microsoft.cst.devskim.cli
  dependency-version: 1.0.90
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file maintenance labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file maintenance

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant